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DETAILED ACTION 

1 . Applicant amendment received on 6/1 1/08 has been entered. 

Response to Arguments/Amendments 

2. In light of applicant amendments the 35 USC § 1 1 2 rejections, cited in the previous 
Office Action, are withdrawn. 

3. On page 5, applicant argues that Nielsen's Fig. 1b and col. 1 lines 32-43 do not 
teach the claimed multiple front-end processes within a workstation. 

The examiner points out, that the specification does not offer a concrete definition of 
a "front-end" process. In order to operate, workstation must run a plurality of 
processes within the workstation, and processes running on a workstation 
communicating with a network comprising threads associated with security , such 
as disclosed by Nielsen (Fig. 1 b and col.1 lines 32-43, for example), would meet the 
broadest reasonable interpretation of "front-end processes". 

4. On page 6, applicant argues that Nielsen discloses URL of a website rather 
than encrypted password search. Specifically, applicant argues that in 
response to a request, the database of Nielsen "Fig. 2 is scanned for an entry 
having the URL of the website sending the authentication request (col. 4, line 
60-63)" rather than teaching "if an encrypted password associated with said 
requested software resources is stored in said password registry". 
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For the clarification purposes, the examiner points out that the exact claim language 

recites " determining if an encrypted password associated with said requested 

software resource is stored in said password registry". 

The examiner directs applicant to Nielsen disclosure in col. 4 lines 62-64: 

"If entry is found, the password management system decrypts the password and user ID 
information using the master password as a key 314..." 

and alternatively (col. 4 line 64-col. 5 line 3): 

"If at step 312, no URL corresponding to the remote server requesting authentication is 
found, the password management system carries out a series of steps related to 
registration that are discussed in reference to Fig. 4..." 

Note that the step 312 is clearly indicated in Fig. 3 as "Password in Database" with 

"Yes" associated with the step 314 and the alternative step follows "No" decision. 
5. Lastly, applicant argues (last paragraph ofpg. 6) that "none of the steps in Fig. 

4 of Nielsen is related to 'notifying said front-end process to prompt for a 

password from a user'". 

The examiner points to col. 4 lines 29-38: 

"The user begins a web browsing session by starting the web browser at step 302. 
Preferably, the password management system of the present invention then prompts the 
user at step 304 for a master password which is stored in system memory for later use in 
encryption and decryption of the password information stored in the database of FIG. 2." 

and col. 4 line 60-66 
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"If at step 312, no URL corresponding to the remote server requesting authentication is 
found , the password management system carries out a series of steps related to 
registration that are discussed in reference to FIG. 4." 
followed by the disclosure in col. 5 lines 11-19: 

"FIG. 4 is a flowchart depicting how a user may register to a remote site in accordance 
with the present invention. If at step 312, no entry has been discovered corresponding 
to the URL of the remote web site, the password management system proceeds to step 
402 where it checks a list of sensitive URLs for which the user has requested that the 
password management system remains inactive. If the URL of the web site requesting 
authentication is on this list, the normal authentication form is displayed for entry of the 
user ID and password particular to that site at step 404 ." 

6. Claims 1-5 and 26-27 have been examined. 

Claim Rejections - 35 USC § 102 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

7. Claims 1-5 and 26-27 remain rejected under 35 U.S.C. 102(B) as being anticipated 
by Nielsen (USPN 6182229). 

As per claims 1 and 26, Nielsen teaches providing a password registry for storing 
passwords within a workstation (database of encrypted passwords, Abstract); 
allowing each of a plurality of software resources to register its password (Fig. 1 B 
and col. 1 lines 32-43) in said password registry via a respective one of a plurality of 
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front-end processes within said workstation, wherein each said password is 
encrypted by said respective front-end process before being stored in said password 
registry (col. 1 line 61- column 2 line 6); in response to an access request to one of 
said software resources via a corresponding one of said front-end processes, 
determining an encrypted password associated with said requested resource is 
stored in said password registry and in a determination that said encrypted 
password associated within said software tool is stored in said password registry, 
sending said encrypted password from said password registry to said corresponding 
front-end process for decryption in order to permit said access request (col. 4 lines 
46-64), and in a determination that said encrypted password associated within said 
resource is not stored in said password registry, notifying said front-end process to 
prompt for a password from a user (col. 4 lines 64-66). 

8. As per claims 2-3, Nielsen discloses associating each of the encrypted passwords 
with at least one of a user ID, a resource hostname, and a resource type (e.g. Fig. 2 
and associate text). 

9. As per claims 4-5, Nielsen discloses retrieving a corresponding one of said 
encrypted passwords using a query key uniquely identifying said each system 
software resource and its associated encrypted password for said each system 
resource, wherein the query key is at least one of user ID, said resource hostname, 
and said resource type (col. 4 lines 60-64). 

10. Claims 26-30 are substantially similar to claims 1-5; thus, claims 26-30 are similarly 
rejected. 
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Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Peter Poltorak whose telephone number is (571) 272- 
3840. The examiner can normally be reached Monday through Thursday from 9:00 
a.m. to 4:00 p.m. and alternate Fridays from 9:00 a.m. to 3:30 p.m 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on (571 ) 272-381 1 . The fax phone number 
for the organization where this application or proceeding is assigned is (571) 273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
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For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 

/Peter Poltorak/ 

Examiner, Art Unit 2134 



/ELLEN TRAN/ 

Primary Examiner, Art Unit 2134 



